[ 
https://issues.apache.org/jira/browse/KNOX-2880?focusedWorklogId=844770&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-844770
 ]

ASF GitHub Bot logged work on KNOX-2880:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 10/Feb/23 10:32
            Start Date: 10/Feb/23 10:32
    Worklog Time Spent: 10m 
      Work Description: zeroflag opened a new pull request, #731:
URL: https://github.com/apache/knox/pull/731

   ## What changes were proposed in this pull request?
   
   Adding log4j1 to banned dependencies.
   
   ## How was this patch tested?
   
   Removing an exclusion caused the build to fail:
   
   ```
   [WARNING] Rule 2: org.apache.maven.plugins.enforcer.BannedDependencies 
failed with message:
   Found Banned Dependency: log4j:log4j:jar:1.2.14 
   ```
   
   




Issue Time Tracking
-------------------

            Worklog Id:     (was: 844770)
    Remaining Estimate: 0h
            Time Spent: 10m

> Mark log4j1 as a banned dependency
> ----------------------------------
>
>                 Key: KNOX-2880
>                 URL: https://issues.apache.org/jira/browse/KNOX-2880
>             Project: Apache Knox
>          Issue Type: Task
>            Reporter: Attila Magyar
>            Assignee: Attila Magyar
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> The maven enforcer plugin is able to check if a dependency is banned, so that 
> we won't include for example log4j1 accidently in the future.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to